BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
Deluge of Nearly 300 Fake Apps Floods Iranian Banking Sector
/in General NewsNo Iranian bank customers are safe from financially motivated cybercriminals wielding convincing but fake mobile apps.
darkreading – Read More
Google issues an emergency update to fix yet another zero-day exploit for Chrome. Here’s what to know
/in General News2023 has been a banner year for zero-day exploits in Chrome and Google has patched its 6th and this one is considered an “emergency.”
Latest stories for ZDNET in Security – Read More
Claiming Zoom Rooms Service Accounts to Gain Access to Tenants
/in General NewsThe finding highlights the potential misuse of service accounts to gain unauthorized access to SaaS systems. Abusing the bug enabled attackers to predict service account email addresses, hijack the accounts, and collect sensitive information.
Cyware News – Latest Cyber News – Read More
Rhysida Ransomware Group Hacked King Edward VII’s Hospital
/in General NewsThe ransomware group claims to have stolen a substantial trove of ‘sensitive data’ and is auctioning it for 10 BTC. As usual, the Rhysida ransomware operators plan to sell the stolen data to a single buyer.
Cyware News – Latest Cyber News – Read More
Queensland Passes Mandatory Data Breach Notice Laws
/in General NewsThe bill also aligns state privacy law more closely with national privacy principles and reforms the Right to Information framework to reduce barriers to citizens accessing government-held information.
Cyware News – Latest Cyber News – Read More
1Kosmos Unifies Identity Verification User Journeys Across Web and Mobile Platforms
/in General NewsPost Content
darkreading – Read More
How a Teenage Saudi Hacker Went From Lockpicking to Ransomware
/in General NewsBlack Hat speaker and 13-year-old ethical hacker Marco Liberale talks about his interest in cybersecurity, and what opportunities he has in Saudi Arabia.
darkreading – Read More
Announcing Fortanix Key Insight — A Solution to Discover and Remediate Data Security Risks in Hybrid Multicloud Environments
/in General NewsPost Content
darkreading – Read More
U.S. Treasury Sanctions Sinbad Cryptocurrency Mixer Used by North Korean Hackers
/in General NewsThe U.S. Treasury Department on Wednesday imposed sanctions against Sinbad, a virtual currency mixer that has been put to use by the North Korea-linked Lazarus Group to launder ill-gotten proceeds.
“Sinbad has processed millions of dollars’ worth of virtual currency from Lazarus Group heists, including the Horizon Bridge and Axie Infinity heists,” the department said.
“Sinbad is also used by
The Hacker News – Read More
10 Holiday Gifts For Stressed-Out Security Pros
/in General NewsOffice giving-friendly fidgets, stress balls, brain teasers, and more that are perfect to calm the most harried cybersecurity professionals.
darkreading – Read More